SELECT against project-scoped views:
Why it is safe
The query runs on a connection whose database user owns nothing and can read nothing outside those views. It is not a filter on the SQL text. The agent could write anything and still reach only this project’s rows. The transaction is read-only, with hard row and time limits.This replaced four hand-written tools (session lists, people lists, per-person
breakdowns, project overview). Each existed because someone asked one question
shape, and every new shape needed new code. A query surface answers the ones
nobody thought of.
What a session was about
There are no generated summaries. To learn what a session covered, your agent reads what people asked for in it:sessions.request_timeline samples the typed
requests from start to end, and the requests view has all of them. Both are
verbatim, so nothing is paraphrased on the way.